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IN THE CLAIMS: 

Please find below a listing of all of the pending claims. 77te statuses of the claims are 
set forth in parentheses. 

1. (Original) A method for facilitating content downloads via an insecure communications 
channel, comprising: 

1 

receiving from a device via an insecure communications channel at least one shared 
secret in encoded form that functions as an identifier of the device; 

transmittinB encrypted content via the insecure communications channel from a 
content server to the device; 

receiving the shared secret in plaintext form via a secure communications channel; 
receiving a confirmation authorizing release of a deciyption key; and 
sending the decryption key for decryption of the encrypted content 

2. (Original) A method as recited in claim 1, wherein the confirmation is based on payment 
for ihc transmitted encrypted content. 

3. (Original) A method as recited in claim 1 , wherein the shared secret identifies a user, the 
device, or both. 

4. (Original) A method as recited in claim 1, wherein the shared secret is a credit card 
number or a phone number. 
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5. (Original) A method as recited in claim 1, further comprising: 

receiving fern the device an acknowledgement indicating receipt of the decryption 
key, 

6. (Original) A method as recited in claim 1, wherein the decryption key is sent to the device 
via the insecure communication channel. 

7. (Original) A method as recited in claim 1, wherein the decryption key is sent in plaintext 
fonn to a point of sale terminal via the secure channel, 

8. (Original) A method as recited in claim I, further comprising: 

receiving a random plaintext from the device. 

9. (Original) A method as recited in claim 8, wherein the shared secret is encoded by a hash 
function of a combination of the shared secret and the random plaintext 

10. (Original) A method as recited in claim 8, further comprising: 

0 

encrypting the decryption key before sending it to the device, 

1 1 . (Original) A method as recited in claim 1 0, wherein th e decryption key is encrypted 
using at least the shared secret and, optionally, the random plaintext secret. 
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12, (Original) A method as recited in claim 1> further comprising: 

receiving .from the device a content download confirmation value that is encoded 
with the shared secret 

13. (Original) A method as recited in claim 12, wherein the content download confirmation 
value is based on an MDS checksum. 

14, (Original) A method as recited in claim 12, wherein the content download confirmation 
value is based on a calculation using the shared secret 

15. (Original) A method as recited in claim 12, wherein the step of receiving confirmation 
further comprises: 

receiving a random plaintext from the device; 

receiving a hash of the shared secret and the random plaintext for each shared secret; 
computing a hash of the shared secret with the random plaintext to produce a 
cyphertext for each shared secret; 

comparing the cyphertext to each of the received hash of each of the shared secrets; 
and in the case of a match, 

identifying the corresponding transmitted encoded content, 

encoding a content download confirmation value for the transmitted encoded content 
using the shared secret; and 

comparing the computed content download confirmation value to the received content 
download confirmation value to verily a complete content download, 
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1 6« (Original) A method as recited in claim 15, further comprising: 

after verification of the complete content download, causing a prompt to be sent to a 

user of the device to purchase the downloaded content; and 
receiving a confirmation of receipt of payment 

17. (Original) A method as recited in claim 1, wherein content stored in the content server is 
encrypted prior to a start of a download process. 

18. (Withdrawn) A method for downloading content from a content server over an insecure 
communications channel, comprising: 

sending a shared secret in an encoded form to a content server via an insecure 

communications channel; 
downloading from the content server an encrypted content via the insecure channel; 
sending an encoded content download confirmation value to the content server via the 

insecure communications clianncl; 
receiving a decryption key in an encrypted form Jrom the content server via the 

insecure communications channel, wherein the decryption key is encrypted using 

the shared secret; 
decrypting the downloaded decryption key using the shared secret; 
decrypting the downloaded encrypted content using the decryption key; and 
sending an acknowledgement of the received decryption key. 
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19, (Withdrawn) The method of claim IS further comprising: 

providing an indicia of acceptance of terms of the download and decryption of the' 
encrypted content by the user, wherein the indicia is an indication of acceptance of 
payment 

20, (Currently Amended) A method of authorizing a release of a decryption key 
corresponding to a downloaded content, comprising: 

receiving from a user via a secure channel a shared secret in a plaintext form;, 
sending the shared secret; to a content server; 

receiving a confirmation of successful encrypted content download from the 
content server; 

after receiving the confirmation_of_succcssful encrypted,contcnt_do_wnload from 
dis content server, prompting the user to accept terms of download and decryption of 
the encrypted content; and 

after receipt of an indicia of such acceptance, sending an authorization to the 
content server to release a decryption key for decrypting the downloaded encrypted 
content* 

21, (Original) A system for transmitting a file to a device, comprising: 

a content server operative to stone a plurality of content files, to wirclcssly 
transmit the content files via an insecure channel, and to communicate with via a secure 
channel; 

one or more remote devices operative to transmit and receive communications to 
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and from the content server over the insecure channel including anyone of the content files in 
encrypted form, each device including a processor to manage the communications as well as 
encryption and decryption of communicated data; 

a point of sale terminal operative to communicate with a user associated with 
any of the devices; and 

a payment server communicatively disposed between the point of sale terminal 
and the content server, and communicating therewith via the secure channel, further operative 
to provide a shared secret in plaintext form via the secured channel from the user to the 
content server, wherein the content server is further operative to release a decryption key to 
one of the devices upon receipt of confirmation from payment server that die user of the 
device accepted terms of download and decryption of a content file, wherein the decryption 
key is encrypted using die shared secret, 

22. (Currently Amended) A computer readable program embodied on a tangible computer 
readable medium for facilitating content download from a content server to a device via an 
insecure communications channel, comprising: 

program code for causing a compuicr to receive a shared secret in an encoded form 
from a device, the encoded shared secret functioning as a device identifier; 

program code for causing a computer to transmit content in an encrypted form from 
a content server to the device; 

program code for causing a computer to receive the shared secret in plaintext form 
via a secure channel; 

program code for causing a computer to receive a confirmation authorizing die 
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release of a decryption key for the transmitted encrypted tile; and 

program code for causing a computer to send the decryption key for decrypting the 
transmitted encrypted file for which the payment confirmation has been received* 

23, (Original) The computer program embodied on a computer readable medium of claim 22 
wherein the confirmation is sent upon payment by a user of the device for the downloaded 
content. 

24, (Withdrawn and Currently Amended) A computer readable program embodied on a 
tangible computer readable medium for downloading content from a content server, over an 
insecure communications channel, comprising: 

code for sending a shared secret in an encoded form to a content server; 
code for receiving from the content server an encrypted content; 
code for sending an encoded content download confirmation value to the content 
server; 

code for receiving an encrypted decryption key from the content server, wherein 
the decryption key is encrypted using the shared secret; 

code for decrypting the encrypted decryption key using the shared secret; 
code for decrypting the downloaded encrypted content using die decryption key; 
and 

code for sending an acknowledgement of die received decryption kcyft;]]. 
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25. (Withdrawn) The computer readable program embodied on a computer readable medium 
of claim 24 further comprising: 

code for providing an indicia of acceptance of tenns of die download and decryption 
of the enciypted content by the user, wherein the indicia is an indication of acceptance of 
payment 

26. (Currently Amended) A computer readable program embodied on a tangible computer 
readable medium for authorizing a release of a decryption key corresponding to a 
downloaded content, comprising: 

code for receiving a shared secret in a plaintext form from a user, via a secure channel; 
code for sending the shared secret to a content server; 

code for receiving a confirmation of successful encrypted content download from the 
file server, 

code for prompting die user to purchase the downloaded encrypted content after 
receiving the con firmation of successful enciypted content download .from the 
content server: and 

code for, after receipt of payment, sending an authorisation to the content server to 
release a decryption key operative to decrypt the downloaded enciypted file. 

27. (Original) A method of facilitating content download via an insecure communications 
channel, comprising: 

receiving a concealed identifier from a device wherein the concealed identifier 
identifies the device; 
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transntitting an encrypted flic to the device via an insecure channel, wherein the 

encrypted file has a corresponding decryption key; 
receiving the identifier in an unconcealed form over a secure channel; 
receiving an authorisation from a payment server over the secure channel; 
encrypting the key using the identifier; and 
transmitting the encrypted key to the device. 

28, (Original) A method for payment of file downloads to a wireless device, comprising: 

receiving a concealed identifier from a device, wherein the identifier corresponds to 
the wireless device; 

transferring a selected encrypted file to the wireless device, wherein the selected file 
is encrypted using a key; 

receiving the identifier in an unconcealed form over a secure channel as part of a 
payment transaction; 

using the identifier to encrypt die key; and 

transmitting the encrypted key to the wireless device after receipt of payment 

29* (Original) A system for transmitting content via an insecure communications channel, 
comprising: 

means for receiving a shared secret in an concealed form, from a device, wherein the 
shared secret identifies the device; 

means for transferring a selected content in an encrypted form to the device, wherein 
the selected file has a corresponding decryption key; 
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means for receiving the shored secret in an unconcealed form over a secure channel 
as part of a payment transaction; 

means for using the shared secret to encrypt a decryption key; 

means for transmitting the encrypted decryption key to the wireless device ofier 
receipt of payment 

30. (Withdrawn) An apparatus for content download to a device via an insecure channel 
comprising: 

means for receiving at least one identifier from a device, wherein the identifier is 
concealed and identifies the device; 

means for transmitting an encrypted file to the device; 

means for transmitting alter receipt of an authorization, a dcciypdonkey encrypted 
using the identifier, wherein the decryption key can decrypt the encrypted file. 
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